Stamps.com getting error while importing

[helpme]

I am trying to use Stamps.com, but where the heck is the batch file??? I can't find it anywhere.

[StampsCom]

Hello,

If there is anything else you need help with, please feel free to let me know.

Thanks!
Chuck
Stamps.com

[tonyreynolds]

OK, So I got 1 hit when I searched both on the Admin/Catalog, but zero hits when I searched Catalog only. The stamps.php file is in the catalog root directory. I take the search to mean that the function is not available from the catalog root directory.
I will research to insure the stamps.php file is in the correct location.


TR

The stamps.php file was in the wrong place. It should be in the admin folder and updated to the correct path in the stamps.com software.
Thanks everybody for their help. I learned a new Zen tool as well!

TR

[vanhorn_s]

I just got done upgrading to 1.5.3, and stamps.com will no longer import orders. It appears to be a compatibility issue, but I have no clue what to edit, so that it will work again. I tested, and it can access the database by doing this:

https:// my site admin /stamps.php?shipping_access_token=XXXXXXXXXXXXXXXXXXXXXX&cmd=ping

I have already tried the latest stamps.com integration software, and they claim it has only been tested to work up to 1.5.0

[RixStix]

Can't help with the Stamps.com issue other than to offer a suggestion.

ShipStation.com has a better interface, has the capability of applying rules and filters that you build to orders imported and has the ability to use both Stamps.com (or Endicia) and Express1 rates for printing USPS postage. Will also print UPS and Fedex labels if you have accounts with them. When shipping Priority and Express mail, Express 1 rates are better than Stamps.com

OH, and Stamps.com recently bought ShipStation.

If you are not subscribed to receive zencart notices, the zencart USPS plugin will be updated next week so that it will work with the USPS updates that go into effect on Sept 7, 2014.

[vanhorn_s]

I may have to do that. I just don't like how ship station is double the price of stamps.com

[RixStix]

That was my thought too, initially. It doesn't take much shipping per month to offset the expense with timesavings and reduced frustration by not beating my head against the wall every time I had a Stamps.com problem and the months it took for them to address the problems.

[vanhorn_s]

I started the free trial of ship station, and I really like how it works, but it is going to cost me $65 a month, because I also import orders from Ebay, and Paypal.

[tflmike]

I was able to get stamps.com integration to work with 1.5.5e with this version where I made a few edits to the file to account for the Mysql depreciated functions and replaced them with MySqli equivalents. I am quite sure there are more elegant ways to get this fixed but for now I would like some comments from the other programmers if this compromises security doing it this way.

I modified the original function:

// Returns the zen country id for the given named country
        function GetCountryID($country_name)
        {
                global $db;
                $qry = sprintf("select countries_id from ". TABLE_COUNTRIES. " where countries_name = '%s'",
                                mysql_real_escape_string($country_name));

                $countryQuery = $db->Execute($qry);
                if ($countryQuery->RecordCount() == 0)
                {
                        return $country_name;
                }
                else
                {
                        return $countryQuery->fields['countries_id'];
                }
        }

and changed it to look like this since the mysqli_real_escape_string() requires a connection string as the first parameter:

 // Returns the zen country id for the given named country
        function GetCountryID($country_name)
        {
                global $db;
				$mysqli = new mysqli('DB_SERVER' , 'DB_SERVER_USERNAME' , 'DB_SERVER_PASSWORD' , 'DB_DATABASE' );
                $qry = sprintf("select countries_id from ". TABLE_COUNTRIES. " where countries_name = '%s'",
                                mysqli_real_escape_string($mysqli, $country_name));
								

                $countryQuery = $db->Execute($qry);
                if ($countryQuery->RecordCount() == 0)
                {
                        return $country_name;
                }
                else
                {
                        return $countryQuery->fields['countries_id'];
                }
        }

I did the same for three other functions that were using similar code see the attached updated stamps module if you wish to see the all the changes.

[tflmike]

OK so live and learn and read the post more thoroughly, I found the above was generating log errors and not very practical having to open a connection to the database just to utilize the newer MySQLi equivalent functions it was an experiment. I wound up changing the MySQL statements to $db->prepare_input as indicated above by Lat9 and this seems to be working much better and not generating any log errors.

My question now is does this still give you the same level of protection from things like SQL injection etc as the old mysql_escape_string() depreciated functions did?

attached is the fully modified and working test version using ($db->prepare_input) instead with zencart 1.5.5e and php 7.0